October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91221 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | Oracle / soa suite | 2026-10-20 | 2026-11-04 |
| CVE-2026-91222 Vulnerability in the Oracle Business Process Management Suite product of Oracle... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-91224 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | Oracle / soa suite | 2026-10-20 | 2026-11-04 |
| CVE-2026-91214 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-87347 Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (com... |
critical | 9.6 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87337 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 10.0 | — | Oracle / access manager | 2026-10-20 | 2026-11-04 |
| CVE-2026-87302 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-87251 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.8 | — | Oracle / access manager | 2026-10-20 | 2026-11-04 |
| CVE-2026-83396 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / data integrator | 2026-10-20 | 2026-11-04 |
| CVE-2026-83397 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / data integrator | 2026-10-20 | 2026-11-04 |
| CVE-2026-83399 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-81212 IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to pe... |
critical | 10.0 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-60432 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113812 Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle co... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-113336 Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113342 Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113328 Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113300 Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a r... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113283 Memory corruption in CredentialProvider in Google Chrome on on Windows prior to... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113263 Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113270 Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a re... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113261 Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113252 Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113235 Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 a... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113222 Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote at... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113211 Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allow... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113186 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113189 Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113169 Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113171 Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113138 Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allo... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113126 Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113116 Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113084 Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113089 Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.4... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113078 Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113072 Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remot... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113056 Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 all... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113023 Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
| CVE-2026-113014 Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowe... |
critical | 9.6 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.